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WHAT IS CLAIMED IS: 

1. A public-key cryptographic scheme comprising: 

a key generation step of generating a secret- 
key: 

• iCl. 22,2/11, J/12, y21,y22,« € Z, 

and a public-key: 

• G,G' : finite (multiplicative) group GQG' 

• q : prime number (the order of G) 
•Pi,ff2 € G 

• C = Sl*i52*^ di = <7l»"52*", d2 = ffl»"fl2^^ /i = gx'y 

• -K : Xi X X2X M — > G' : one-to-one mapping 

• TT-l : Im(7r) —^XixX^xM 

where the group G is a partial group of the group G', 
and X2 are an infinite set of positive integers which 
satisfy: 

Qi||a2 < q (Vai € Xi, Va2 € X2) 

where M is a plaintext space; 

a ciphertext generation and transmission step 
of selecting random numbers OCieXi, (XjeXz, reZq for a 
plaintext m (m e M) , calculating: 

^1 = Pi'", U2 = 92 , e = 7r(ai, 02, m)hr , v = gi°^c''di°^d2""' 

where (X = (X^ | | oCj, and transmitting (u^, U2, e, v) as a 
ciphertext; and 

a ciphertext reception and decipher step of 
calculating from the received ciphertext and by using 
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the secret key, 0L\, a\, m' {K\gX^, (X'jeXg, m'eM) 
which satisfy: 

ir{ai, a2,m') = e/ui' 

and if the following is satisfied: 

outputting m' as the deciphered results (where «' = 0L\ 
II a' 2), whereas if not satisfied, outputting as the 
decipher results the effect that the received 
ciphertext is rejected. 

2. A public-key cryptographic scheme comprising: 

a key generation step of generating a secret- 
key: 

• , a;2, yii , yi2, itei , ite2, « € Z, 

and a public- key: 

• P> S : prime number (q is a prime factor of p-1) 

• Si,52 € Zp : ordp(pi) = ordp(52) = q 

• c = gi''^g2''^ modp, di = gi"^^g2^^ modp, d2 — gi^^'^Qi^^^ modp, h = ^1* mod p, 

• kxMM- positive constant (lO*i+*» < g, 10*'' < g, 10*^+'='+*' < p) 

a ciphertext generation and transmission step 
of selecting random n\ambers (X = (Xi | | (X2 {|OCj_| = k^, IOC2I 
= kz) for a plaintext m (|m| = kg where |x| is the 
number of digits of x) , calculating: 

m = al|iiC 



selecting a random number reZq, calculating: 
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til = 9i mod p, U2 = ftj*" mod p, e=mh^ mod p, v = gi'^c^dx^da^'' mod p 

and transmitting (u^, e^r v) as a ciphertext; and 

a ciphertext reception and decipher step of 
calculating from the received ciphertext and by using 
the secret key, a\, (X.\, m' (|a'il = k^, \GLW = kz, |m' | 
= kg) which satisfy: 

"ill«2ll"*' = modp 

and if the following is satisfied: 

<7i°'iui^^+«'»»+"»'j«i«2*=+**'»"+"*'»22 = V (mod p) 

outputting m' as the deciphered results (where (X' = <X.\ 
II (X'2), whereas if not satisfied, outputting as the 
decipher results the effect that the received 
ciphertext is rejected. 

3. A public-key cryptographic scheme according 
to claim 1, wherein the public-key is generated by a 
receiver and is made public. 

4 . A public-key cryptographic scheme according 
to claim 1, wherein in said ciphertext transmission 
step, the random numbers Oi^^Xy^, ^a^^a reZq are 
selected beforehand and the following is calculated and 
stored beforehand: 

5 • A public-key cryptographic scheme according 

to claim 2, wherein in said ciphertext transmission 



step, the random numbers OL^, (X^ = kj, loCjl = k^) , 

and reZq are selected beforehand and the following is 
calculated and stored beforehand: 

ui = mod p, ti2 = 92"" mod p, mod p, ^I'^^c^'di'*' mod p 

6. A cryptographic communication method 

comprising: 

a key generation step of generating a secret- 
key: 

• xi,X2,yn,j/i2,y2i,Jte2,2 e Z, 

and a public-key: 

• G,G' : finite (multiplicative) group GQG' 

• q : prime number (the order of G) 
•9U92 e G 

• c = 91'^'^ 92"^, di = pi»^^ff2^", (h = ffi»"p2'«=', h = 9i', 

• TT : X\ x. X2 y. M — G' : one-to-one mapping 

• TT-l : Im(7r) — ^ Xi x X2 x M 

• E : sjTnmetric encipher function 

where the group G is a partial group of the group G', 
and X2 are an infinite set of positive integers which 
satisfy: 

Q!i||q!2 < q (Vai € Xi, Vq2 € X2) 

where M is a key space; 

a ciphertext generation and transmission step 
of selecting random numbers ttieXi, (XjeXj, reZq for key 
data K (K g M) , calculating: 

Ml=^7l^ ^^2 = ^/2^ e = niaua2, K)hr, v = gi'^^c^'di'^dz^'' 



where a = (Xi | | 0L2, generating a ciphertext C of 
transmission data m by: 

C = EKim) 

by using a (symmetric cryptographic function E and key 
data K, and transmitting (u^, Uj, e, v, C) as the 
ciphertext; and 

a ciphertext reception and decipher step of 
calculating from the received ciphertext and by using 
the secret key, a\, Oi\, K' (Oi\^X^, Oi^^X^, K'eM) 
which satisfy: 

and if the following is satisfied: 

where «' = (X'l | i 0L\ 
executing a decipher process by: 
m = DK>{C) 

outputting deciphered results, whereas if not 
satisfied, outputting as the decipher results the 
effect that the received ciphertext is rejected. 
7 • A cryptographic communication method 

according to claim S, wherein the ciphertext C is 
generated by: 

C = EKUi.otua2)\\m) 



by using a symmetric cryptographic function E, the key 
data K and a publicized proper function f , it is 
checked whether the following is satisfied: 

fia[,oQ = [DK'(.Ct 

where f outputs a value of k bits and [x] " indicates the 
upper k bits of x, and if the check passes, a decipher 
process is executed by: 

where [x]""" indicates a bit train with the upper k bits 
of X being removed. 

8- A cryptographic communication method 

comprising: 

a key generation step of generating a secret- 
key: 

and a public-key: 

*P,g • prime number (q is a prime factor of p-1) 

• 5i,fl2 e Zp : ordp(pi) = ordp(52) = q 

• c = ffi*^S2*» modp, di = <7i»"fl2»^« modp, da = 5i»«^S2»» modp, h = gi' mod p, 

• k2, ks : positive constant (10**+*^ < g, 10*^ < g, i0*i+*3+*3 < p) 

• E : symmetric encipher function 

a ciphertext generation and transmission step 
of selecting random numbers (X = (Xi | | Gi^ (| (Xi | = k^, | a2 1 
= kj) for key data K (iK| = kj where |x| is the number 
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of digits of x) , calculating: 
m =a||iir 

selecting a random number reZq, calculating: 

«i = fli'' mod p, U2 = 92^' mod p, e = m fe'" mod p, v = ffi"^c*'<ii**^<fe^'' mod p 

and generating a ciphertext C of transmission data by: 
C = EK{m) 

by using a (symmetric) cryptographic function E and the 
key data and transmitting (u^, m^, e, v, C) as the 
ciphertext; and 

a ciphertext reception and decipher step of 
calculating from the received ciphertext and by using 
the secret key, a\, a'2, K' {\0L\\ = k^, \OLW = IK'| 
= kg) which satisfy: 

a'MWK' = e/ui' modp 

and if the following is satisfied: 

Pi°iMi*i+«'«'"+^'«itt2*»+"'»"+*^'«« = V (mod p) 

where oc' = (x.\ | | a'g, 

executing a decipher process by: 

outputting deciphered results, whereas if not 
satisfied, outputting as the decipher results the 
effect that the received ciphertext is rejected. 
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9. A cryptographic communication method 
according to claim 8, wherein the ciphertext C is 
generated by: 

C = £?K(/(ai,a2)||m) 

by using a symmetric cryptographic function E, the key 
data K and a publicized proper function f , it is 
checked whether the following is satisfied: 

Pi«iwi'i+"''^i+*^'»iu2*»+"'**»+^'»^ = V (mod p), 

where f outputs a value of k bits and [x]"" indicates the 
upper k bits of x, and if the check passes, a decipher 
process is executed by: 

m^iDK'iC)]-" 

where [x]''' indicates a bit train with the upper k bits 
of x being removed. 

10. A cryptographic communication method 
according to claim 6, wherein the public-key is 
generated by a receiver and is made public. 

11. A cryptographic communication method 
according to claim 6, wherein in said ciphertext 
transmission step, the random numbers OCi, Otj ((XieXi, Otge 
X2) and reZq are selected beforehand and the following 
is calculated and stored beforehand: 



ru 

ril 
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12. A cryptographic communication method 
according to claim 6, wherein in said ciphertext 
transmission step, the random numbers GL^, (Xj ( I (X^ | = k^, 
KXzl = kj) and reZq are selected beforehand and the 
following is calculated and stored beforehand: 

V'l = gi" mod p, U2 = g2^ mod p, mod p, gi'*^c^di°^ mod p 

13. A cryptographic communication method 
comprising: 

a key generation step of generating a secret- 
key: 

• xi,X2,yuy2,zeZq 

and a public-key: 

• G,G' : finite (multiplicative) group GQG' 

• q : prime number (tiie order of G) 
•51.52 € G 

• c = 5i'^fl2*S d = 5i»^52«, = ^1*, 

• TT : X X2 X M — >^ Dom(£?) : one-to-one mapping 

(Dom(E) is the domain of the function E) 

• ff-i : Im(7r) — >XixX2xM 

• H : hash function 

• E : symmetric encipher function 

where the group G is a partial group of the group G', 
and X2 are an infinite set of positive integers which 
satisfy: 

ailla2 < 9 (Vai € -^i, Vaa € X2) 



a ciphertext generation and transmission step 



of selecting random numbers K^^X^, (XjeXg, reZq, 
calculating: 

«i=ffr, U2 = »2', v = gi'''<rdr, K^H(hr) 

where (X = | | (X^, generating a ciphertext C of 
transmission data m by 

C — ji?K-(ir(ai,a2,m)) 

by using a (symmetric) cryptographic function E; and 
transmitting (u^, U2, v, C) as the ciphertext; and 

a ciphertext reception and decipher step of 

calculating : 

K' = H{ui') 

by using the secret key, calculating from the received 
ciphertext, (X\, oc'j (where OC'ieXi (X'zeXz) which 
satisfy: 

if the following is satisfied: 
where (X' = 0L\ \ \ a'2 

outputting m' as the deciphered results, whereas if not 
satisfied, outputting as the decipher results the 
effect that the received ciphertext is rejected. 
14. A cryptographic communication method 

comprising: 
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a key generation step of generating a secret- 
key: 

and a public-key: 

• P> 9 : prime number (q is a prime factor of p-1) 

• 91,92 eZpi ordp(^i) = ordp(ff2) = q 

mc = gx^^g-f^ mod p, d = gi^^g2^^ mod p, h = gi' mod p, 

• ki, k2, h : positive constant (lO*'i+*2 < g, 10*=3 < q, lo'^i+^a+fcs < p) 

• H : hash function 

• E : symmetric encipher fimction (the domain of E is all positive integers) 

a ciphertext generation and transmission step 
of selecting random numbers 0( = (Xi i | ( I OCi | = k^, 1 1 
= kj, where (|x| is the number of digits of x) , 
selecting a random number reZq, calculating: 

«i=5i'"modi>, W2=p2''niodp, v = gi°'^(f (P"" modp, K = H(hr mod p) 

transmitting the ciphertext (u^, U2, v, C) ; generating a 
ciphertext C of transmission data m by: 

C = EK(ai\\a2\\m) 

by using a (symmetric) cryptographic function, and 
transmitting (Ui, u^, v, C) as the ciphertext; 

a ciphertext reception and decipher step of 
calculating: 

K' = Hiui''modp) 



by using the secret key, calculating from the received 
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ciphertext, a\, Gi\ (la'il = k^, \CLW = kz) which 
satisfy: 

and if the following is satisfied: 
pi'^iixi==i+"'«^«2^'^"'^ = V (mod p) 

o-utputting m' as the deciphered results (where «' = K'l 
M (X'2) , whereas if not satisfied, outputting as the 
decipher results the effect that the received 
ciphertext is rejected. 

15. A cryptographic communication method 
according to claim 13, wherein the public-key is 
generated by a receiver and is made public. 

16. A cryptographic communication method 
according to claim 13, wherein in said ciphertext 
transmission step, the random numbers (Xi, (Xj (OCjeXi, (XaS 
X2) and reZq are selected beforehand and the u^, U2, e 
and V are calculated and stored beforehand. 

17. A cryptographic communication method 
according to claim 14, wherein in said ciphertext 
transmission step, the random numbers (X^, (Xj ( I OC^ | = k^^, 

1 ttj I = kg), and reZq are selected beforehand and the u^, 
U2, e and v are calculated and stored beforehand. 

18. A cryptographic communication method 
comprising: 

a key generation step of generating a secret- 
key: 
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• sk : (asymmetric cryptography) decipher key 
and a public-key: 

• G : finite (multiplicative) group 

• q : prime number (the order of G) 
•gu92 e G 

• TT : Xi X X2 X M — ^ Dom(E) : OTe-to<>ne mapping . « ^ x,, 

(Dom(E) IS the domam of the function E) 

• TT-i : Im(7r) — > x X 2 x M 

• J5pfc(-) : (asymmetric cryptography) encipher function 

where the group G is a partial group of the group G', Xi 
and X2 are an infinite set of positive integers which 
satisfy: 

aillaa < q (Vai € Xi, Vq2 € X2) 

where M is a plaintext space; 

a ciphertext generation and transmission step 
of selecting random numbers OL^^X^f (XgeXz, reZq, 
calculating: 

where Of = OCi | | (X2, generating a ciphertext C of 
transmission data m by: 

e = J5pfc(7r(ai,a2,m)) 

by using an (asymmetric) cryptographic function Ep^, and 
transmitting (u^, v) as the ciphertext; and 

a ciphertext reception and decipher step of 



calculating from the received ciphertext and by using 
the secret key, '(X'l, (X'g, m' {Di\GX^r Of'zeXg, m' eM) 
which satisfy: 

and if the following is satisfied: 
where : 

a' = ai||a^ 

outputting m' as the deciphered results^r whereas if not 
satisfied, outputting as the decipher results the 
effect that the received ciphertext is rejected. 
19. A cryptographic communication method 

comprising: 

a key generation step of generating a secret- 
key: 

•xi,X2,yi,y2 € Z, 

• sk : (as3fmmetric cryptography) 
decipher key 

and a public-key: 

*PyQ '• prime number (q is a prime factor of p-1) 

• 91,92 € Zp : ardpigi) = ordp(<fe) = q 

• c = gi''^g2''^ mod p, d = gi^^gz^^ modp, 
•hyh- positive constant (10*=^+*^ <q) 

• ^pki') '• (asymmetric cryptography) enciphra- function 

(the domain is all positive integers) 



a ciphertext generation and transmission step 
of selecting random numbers (X = OCi | | otg (10(^1 = k^, 10(2 1 
= kj, where |x| is the number of digits of x) , selecting 
a random number reZq, calculating: 

ui = gi^ mod p, U2—g2 mod p, t; = gi^'^c^cP^ mod p 

generating a ciphertext C of transmission data m 
(positive integer) by: 

e = Epk(ai\\oi2\\m) 

by using the secret key, and transmitting (ui, U2, e, v) 
as the ciphertext; and 

a ciphertext reception and decipher step of 
calculating from the received ciphertext and by using 
the secret key, a'^, 0L\, m' (|a'J = k^, Itt'J = ^z, m' 
is a positive integer) which satisfy: 

<A\\<^\\m'=D,Ue) 

and if the following is satisfied: 

pi°i«i*^+'*'*^W2'*+"'3« = V (mod p), 

where : 

outputting m' as the deciphered results, whereas if not 
satisfied, outputting as the decipher results the 
effect that the received ciphertext is rejected. 
20- A cryptographic communication method 

according to claim 18, wherein the public-key is 



- 50 - 

generated by a receiver and is made public. 

21. A cryptographic communication method 
according to claim 18, wherein in said ciphertext 
transmission step, the random numbers (Xj, Kg ((XieXi, (Xje 
Xj) and reZq are selected beforehand and the u^, U2 and 
V are calculated and stored beforehand. 

22 . A cryptographic communication method 
according to claim 19, wherein in said ciphertext 
transmission step, the random numbers (X^, ttj ( I | = k^, 
iCfal = ^2) , and reZq are selected beforehand and the u^, 
U2 and V are calculated and stored beforehand. 



